IDM 11gR2 changes/new features : OIM Sandboxes

In my last post I touched on new console (System Administrator /sysadmin) introduced in OIM 11gR2 and highlighted new link sandboxes, this post covers information about sandboxes (new feature) in OIM 11gR2

As per OIM Admin Guide Sandbox is an area where metadata objects can be modified without affecting their mainline usage. In simple words, sandbox is a temporary storage area to save a group of page customizations before they are either saved and published to other users, or discarded.

Creating and activating a sandbox is mandatory for customizing the UI by using the Web Composer, Defining Application Instances etc… Without an active sandbox, Oracle Identity Manager does not allow to open any page in customization mode.


1. Before doing any activity in OIM (like Create/Modify Forms, Custom Attribute, creating application instances, adding roles/attributes to catalog) you must create Sand Box and activate it.

Note: more on catalog and application instances in OIM (introduced in 11gR2 later) later

2. You can have multiple sandboxes in OIM but only one sandbox can be active at any given time

3. You can export/import the sandbox to move the changes from the test to production environment.

4. Operations that you can perform on sandbox are ACTIVATE, PUBLISH, DEACTIVATE, EXPORT, IMPORT More on operations on sandboxes here

5. To create sandbox , login to identity manager self service (/identity) or System Administration (/sysadmin) and click on top right of link “Sandboxes” and then click on Create SandBox

6. Before publishing a sandbox , it is recommended to backup MDS . You can use /EM to backup MDS, steps here

Share This Post with Your Friends over Social Media!

About the Author Atul Kumar

Oracle ACE, Author, Speaker and Founder of K21 Technologies & K21 Academy : Specialising in Design, Implement, and Trainings.

follow me on:

Leave a Comment:

» Application Instance in OIM – IDM 11gR2 changes/new features Online Apps DBA: One Stop Shop for Apps DBA’s says September 4, 2012

[…] Disconnected application instance can only be created when a sandbox is active. (More on disconnect applications […]

» IDM 11gR2 changes/new features : OIM Catalog to create Accounts (Application Instances, Roles, Entitlements) Online Apps DBA: One Stop Shop for Apps DBA’s says September 10, 2012

[…] new features in Oracle IdM 11gR2 like new console (System Administration) click here, Sandboxes here, and Applications […]

pipish says October 9, 2012


How do the provisioning OIM11GR2
I followed the configuration steps but I get an error like object could not be created

Akshata says June 26, 2015

Hey Atul,

I would like to add few more lines of experience to your blog.

To make sand box business easy, following steps should be followed.

1. At a time in one environment only one Sand box should be created and activated. All other developers should work on same sand box to avoid conflicts in versioning.

2. Once the work is done, take the backup before publishing.

3. If developers are working on say three different objects like User,Role and Organization then three different sand boxes can be created at a time and worked upon parallely.But make sure that you are nowhere touching any other object.

4. After publishing sand box you create new sand box. new sand box will not have anyting related to past changes.

5. Sand Box can be exported only when you do some changes in any of the OIM objects.

Atul Kumar says June 26, 2015

Thanks and good one .

Ankur says August 12, 2015

Quick query. Is this OIM sandbox import possible through wlst? this doc tells me it is possible. but I’m confused what to use for app name field.
Can you please help in case you’ve done this?

Add Your Reply